Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/XSncXPtQFrR6OnvjwCgjlXBOnuo.roa
File: XSncXPtQFrR6OnvjwCgjlXBOnuo.roa (raw, json)
Hash identifier: rd3Hq9XOP2VOFYgoOm/3MT8hh96eW3ccA06wMc+ZiZE=
Subject key identifier: 5D:29:DC:5C:FB:50:16:B4:7A:3A:7B:E3:C0:28:23:95:70:4E:9E:EA
Certificate issuer: /CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
Certificate serial: 01856E0B0768353FBCEFE7AEA669D5E7EA06
Authority key identifier: B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/XSncXPtQFrR6OnvjwCgjlXBOnuo.roa
Signing time: Sun 01 Jan 2023 15:54:54 +0000
ROA not before: Sun 01 Jan 2023 15:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 146.255.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0b:07:68:35:3f:bc:ef:e7:ae:a6:69:d5:e7:ea:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3bea0da56e55fa2eb500f150dc478ed1cb39daf
Validity
Not Before: Jan 1 15:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5d29dc5cfb5016b47a3a7be3c0282395704e9eea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:fa:70:7e:4f:ab:4a:ec:14:6c:f2:bc:11:
8a:db:c3:11:d9:80:16:0e:93:2c:39:fe:4a:df:44:
f1:e0:b0:96:35:fc:d8:63:97:c0:11:21:7c:aa:ff:
6e:b6:70:e5:07:36:1b:80:2d:d9:63:3d:cb:70:d5:
b0:a5:3f:34:6d:89:a1:16:70:94:5b:44:05:7b:53:
94:19:e5:ff:18:45:d7:e1:60:50:95:65:2f:b2:98:
af:b5:91:7a:2b:83:37:90:95:6b:3a:c3:00:be:c0:
45:6f:c5:9a:db:ae:58:73:eb:d1:a9:21:3c:01:c9:
ff:f0:62:ab:be:8a:25:bf:2b:82:e5:d0:a6:bd:23:
d4:49:45:dc:c4:69:11:03:cd:06:51:28:14:a3:e6:
a1:bc:26:46:a6:ff:f2:3e:74:6f:55:93:3e:d4:83:
e0:9e:29:d7:5b:d1:96:f3:fc:6e:91:74:54:01:59:
ff:ff:26:3d:08:23:d4:99:a2:09:b6:d2:e2:5a:f1:
44:52:f7:d6:99:eb:71:63:66:e6:1b:d9:0b:c8:4a:
97:27:18:74:2f:7a:96:53:42:c8:51:33:aa:ba:01:
c6:d9:06:ea:25:b6:e5:9c:bd:73:16:49:fc:24:59:
c3:01:c0:86:2b:6b:bc:06:24:3f:b2:90:fa:fc:8a:
ea:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:29:DC:5C:FB:50:16:B4:7A:3A:7B:E3:C0:28:23:95:70:4E:9E:EA
X509v3 Authority Key Identifier:
keyid:B3:BE:A0:DA:56:E5:5F:A2:EB:50:0F:15:0D:C4:78:ED:1C:B3:9D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s76g2lblX6LrUA8VDcR47Ryzna8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/XSncXPtQFrR6OnvjwCgjlXBOnuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/cbb5ed-65cc-4979-b0b1-a493fe7f2ae6/1/s76g2lblX6LrUA8VDcR47Ryzna8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.255.189.0/24
Signature Algorithm: sha256WithRSAEncryption
47:25:88:e3:d6:61:39:a3:f7:57:4b:a5:3a:2a:04:72:11:61:
12:d8:7e:6a:47:d7:c0:36:c0:6c:b1:94:52:86:0a:c6:bb:a1:
6f:58:c5:d9:f1:60:71:36:00:dd:04:ef:18:78:46:41:0b:4e:
34:14:a4:ca:ae:71:4f:b6:8d:16:5c:52:e3:22:b4:2d:46:8f:
40:5e:cb:bb:21:db:9a:d1:13:f8:09:f4:28:8f:45:8c:44:a7:
c5:2d:cf:30:44:23:76:7a:e4:f7:da:29:23:48:23:9a:02:74:
0e:44:50:ac:29:c2:06:1d:70:24:19:3c:23:84:e6:7a:20:f7:
f1:b4:bb:13:d5:15:bb:f9:4a:31:d5:f7:2c:77:d3:ab:db:9c:
0f:f8:d5:03:e8:e5:c6:c1:95:5b:a9:c1:bc:bf:98:a8:61:ce:
72:8c:d5:d0:c3:b4:24:fa:92:73:bb:8a:a5:93:5c:04:de:01:
e1:72:1a:5f:93:9f:d6:ca:5e:74:b3:48:97:66:0d:17:59:d2:
0f:ff:6e:cb:30:e4:a9:9f:9d:1c:75:f9:c0:84:b7:e3:41:da:
68:17:fd:8e:52:e4:cf:62:50:91:e0:f3:f2:87:8d:95:f8:88:
4a:24:c0:5d:f4:56:10:ba:64:2b:6d:21:a3:9a:e7:2b:d3:06:
47:6a:80:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:42:50 2023 by rpki-client on console.sobornost.net